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Foreword 



This Technical Specification has been produced by the 3GPP. 

The contents of the present document are subject to continuing work within the TSG and may change following formal 
TSG approval. Should the TSG modify the contents of the present document, it will be re-released by the TSG with an 
identifying change of release date and an increase in version number as follows: 

Version x.y.z 

where: 

x the first digit: 

1 presented to TSG for information; 

2 presented to TSG for approval; 

3 or greater indicates TSG approved document under change control. 

y the second digit is incremented for all changes of substance, i.e. technical enhancements, corrections, 
updates, etc. 

z the third digit is incremented when editorial only changes have been incorporated in the document. 
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1 Scope 

The purpose of this TS is to describe the service access procedures as presented to the user. 

Definitions and procedures are provided in this TS for international roaming, national roaming and regionally provided 
service. These are mandatory in relation to the technical realization of the Mobile Station (UE). 

1.1 References 

The following documents contain provisions which, through reference in this text, constitute provisions of the present 
document. 

• References are either specific (identified by date of publication, edition number, version number, etc.) or 
non-specific. 

• For a specific reference, subsequent revisions do not apply. 

• For a non-specific reference, the latest version applies. In the case of a reference to a 3GPP document (including 
a GSM document), a non-specific reference implicitly refers to the latest version of that document in the same 
Release as the present document. 

[I] Void 

[2] 3GPP TR 21.905: "Vocabulary for 3GPP Specifications". 

[3] 3GPP TS 23.122: "Non Access Stratum functions related to Mobile Station (MS) in idle mode". 

[4] ITU-T Recommendation Q.1001: "General aspects of Public Land Mobile Networks". 

[5] 3GPP TS 22.043: "Support of Localised Service Area (SoLSA). Stage 1". 

[6] 3GPP TS 22.234: "Requirements on 3GPP system to wireless local area network (WLAN) 

interworking". 

[7] 3GPP TS 22.101: "Service aspects; Service principles". 

[8] 3GPP TS 22.278: "Service requirements for the Evolved Packet System (EPS)". 

[9] 3GPP TS 36.304: "User Equipment (UE) procedures in idle mode" 

[10] 3GPP TS25.304: "User Equipment (UE) procedures in idle mode and procedures for cell 

reselection in connected mode". 

[II] 3GPP TS 25.304: "User Equipment (UE) procedures in idle mode and procedures for cell 
reselection in connected mode'. 

[12] 3GPP TS 36.304: "Evolved Universal Terrestrial Radio Access (E-UTRA); User Equipment (UE) 

procedures in idle mode". 

1 .2 Definitions and abbreviations 

In addition to those below, abbreviations used in this 3GPP TS are listed in 3GPP TR 21.905 [2]. 

PLMN 

A Public Land Mobile Network (PLMN) is a network established and operated by an Administration or RPOA 
for the specific purpose of providing land mobile communication services to the public. It provides 
communication possibilities for mobile users. For communications between mobile and fixed users, interworking 
with a fixed network is necessary. 

A PLMN may provide service in one, or a combination, of frequency bands. 
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As a rule, a PLMN is limited by the borders of a country. Depending on national regulations there may be more 
than one PLMN per country. 

A relationship exists between each subscriber and his home PLMN (HPLMN). If communications are handled 
over another PLMN, this PLMN is referred to as the visited PLMN (VPLMN). 

System Area 

The System Area is defined as the group of PLMN areas accessible by UEs. 

Interworking of several PLMNs and interworking between PLMNs and fixed network(s) permit public land 
mobile communication services at international level. 

NOTE 2: The System Area according to [4] Recommendation Q.1001 corresponds to the System Area. 

Service Area 

The Service Area is defined in the same way as the Service Area according to ITU-T Recommendation 
Q.1001 [4]. In contrast to the PLMN area it is not based on the coverage of a PLMN. Instead it is based on the 
area in which a fixed network user can call a mobile user without knowing his location. The Service Area can 
therefore change when the signalling system is being extended, for example. 

Regionally Provided Service 

Regionally Provided Service is defined as a service entitlement to only certain geographical part(s) of a PLMN, 
as controlled by the network operator. 

Localised Service Area (LSA) 

The localised service area concept shall give the operator a basis to offer subscribers different services (e.g. 
tariffs or access rights) depending on the location of the subscriber. A LSA consists of a cell or a number of cells 
within a PLMN. (3GPP TS 22.043 [5]). 

Tracking Area: 

E-UTRAN utilises Tracking Areas (TA) for UE access control, location registration, paging and mobility 
management. The TA is independent of Location Areas (LA) and Routing Areas (RA). A TA comprises one or 
more E-UTRA cells Service requirements for E-UTRAN are specified in 3GPP TS 22.278 [8]. 



2 Roaming 

2.1 General requirements 

A UE with a valid IMSI may roam and access service in the area authorized by the entitlement of the subscription. 

If a communication has been established, the UE will in principle not suffer an interruption within the PLMN area 
(provided the entitlement of the subscription allows it). Exceptions are possible if no network resources or radio 
coverage are available locally. 

However, if the UE leaves the PLMN area, an established communication may terminate. If the user then wants to 
continue, another network providing service has to be selected and a new communication has to be established (see 
clause 3). 

Subject to roaming agreements, a visited network shall be able to prevent incoming roamers from using a particular 
radio access technology (e.g. when the home network has not implemented this radio access technology). 



2.2 International roaming 



International roaming is a service whereby an UE of a given PLMN is able to obtain service from a PLMN of another 
country. 
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The availability of International Roaming is subject to inter-PLMN agreements. 



2.3 National roaming 



National Roaming is a service whereby an UE of a given PLMN is able to obtain service from another PLMN of the 
same country, anywhere, or on a regional basis. 

The availability of National Roaming depends on the home PLMN of the requesting UE and the visited PLMN; it does 
not depend on subscription arrangements. 



2.4 Roaming in shared networks 



Mechanisms shall be specified to enable flexible allocation of visiting roamers among core network operators that have 
roaming agreements with the same roaming partners. The core network operators shall be able to pre-define their 
relative share of visiting roamers and distribute the visiting roamers that apply automatic network selection to different 
core networks connected to the radio access network accordingly. 

When network sharing exists between different operators and a user roams into the shared network it shall be possible 
for that user to register with a core network operator (among the network sharing partners) that the user"s home 
operator has a roaming agreement with, even if the operator is not operating a radio access network in that area. 

The selection of a core network operator among those connected to the shared radio access network can either be 
manual (i.e. performed by the user after receiving a list of available core network operators) or automatic (i.e. 
performed by the UE according to user and operator preferred settings). For further information see subclause 3.2. 



Provisions for providing continuity of service 



3.1 Location registration 



PLMNs shall provide a location registration function with the main purpose of providing continuity of service to UEs 
over the whole system area. The location registration function shall be such as to allow: 

Fixed subscribers to call a UE by only using the directory number of the UE irrespective of where the UE is 
located in the system area at the time of the call. 

UEs to access the system irrespective of the location of the UE. 

UEs to identify when a change in location area has taken place in order to initiate automatic location updating 
procedures. 

3.2 Network selection 
3.2.1 General 

The UE shall support both manual and automatic network selection mechanisms (modes). The UE shall select the last 
mode used, as the default mode, at every switch-on. 

As an optional feature of the ME, the user shall be able to set a preference in the ME for the mode that shall be used at 
switch on. If set then the ME shall select this preference rather than the default mode. 

NOTE: By defaulting to the last mode used, e.g. manual network selection, the undesired automatic selection of 
an adjacent PLMN instead of the desired HPLMN in border areas, can be avoided at switch-on. 

The user shall be given the opportunity to change mode at any time. 

Except as defined below, the MMI shall be at the discretion of the UE manufacturer. 

The UE shall contain display functions by which Available PLMNs and the Selected PLMN can be indicated. 
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In order not to confuse the user, the same definitions of PLMN names shall be applied consistently both in registered 
mode and in the list presented to the user when in manual mode. 

In shared networks a radio access network can be part of more than one PLMN. This shall be transparent to the user, i.e. 
the UE shall be able to indicate those PLMNs to the user, and the UE shall support network selection among those 
PLMNs, as in non-shared networks. 

3.2.2 Procedures 
3.2.2.1 General 

In the following procedures the UE selects and attempts registration on PLMNs. 

In this TS, the term "PLMN Selection" defines an UE based procedure, whereby candidate PLMNs are chosen, one at a 
time, for attempted registration. 

A User Controlled PLMN Selector data field exists on the USIM to allow the user to indicate a preference for network 
selection. It shall be possible for the user to update the User Controlled PLMN Selector data field, but it shall not be 
possible to update this data field over the radio interface, e.g. using SIM Application Toolkit. 

It shall be possible to have an Operator Controlled PLMN Selector list and a User Controlled PLMN Selector list stored 
on the SIM/USIM card. Both PLMN Selector lists may contain a list of preferred PLMNs in priority order. It shall be 
possible to have an associated Access Technology identifier e.g., E-UTRAN, UTRAN, or GERAN associated with each 
entry in the PLMN Selector lists. 

The UE shall utilise all the information stored in the USIM related to network selection, e.g. HPLMN, Operator 
controlled PLMN Selector list, User Controlled PLMN Selector list, Forbidden PLMN list. 

NOTE 1 : A PLMN in a Selector list, including HPLMN, may have multiple occurrences, with different access 
technology identifiers. 

The UE shall ignore those PLMN + access technology entries in the User Controlled PLMN selector and Operator 
Controlled PLMN selector lists where the associated Access Technology is not supported by the UE. In the case that 
there are multiple associated Access Technology identifiers in an entry the UE shall not ignore the entry if it includes 
any associated Access Technology that is supported by the UE. 

It shall be possible to handle cases where one network operator accepts access from access networks with different 
network IDs. It shall also be possible to indicate to the UE that a group of PLMNs are equivalent to the registered 
PLMN regarding PLMN selection, cell selection/re-selection and handover. 

It shall be possible for the home network operator to identify alternative Network IDs as the HPLMN. It shall be 
possible for the home network operator to store in the USIM an indication to the UE that a group of PLMNs are treated 
as the HPLMN regarding PLMN selection. Any PLMN to be declared as an equivalent to the HPLMN shall be present 
within the EHPLMN list and is called an EHPLMN. The EHPLMN list replaces the HPLMN derived from the IMSI. 
When the EHPLMN list is present, any PLMN in this list shall be treated as the HPLMN in all the network and cell 
selection procedures. 

If registration on a PLMN is successful, the UE shall indicate this PLMN (the "registered PLMN") and be capable of 
making and receiving calls on it. The identity of the registered PLMN shall be stored on the SIM/USIM. However, if 
registration is unsuccessful, the UE shall ensure that there is no registered PLMN stored in the SIM/USIM. 

If a registration is unsuccessful because the IMSI is unknown in the home network, or the UE is illegal, then the UE 
shall not allow any further registration attempts on any network, until the UE is next powered-up or a SIM/USIM is 
inserted. 

If the registration is unsuccessful due to the lack to service entitlement, specific behaviour by the UE may be required, 
see subclause 3.2.2.4. 

To avoid unnecessary registration attempts, lists of forbidden PLMNs, TAs and LAs are maintained in the UE, see 
subclause 3.2.2.4 and 3GPP TS 23.122 [3]. 

Registration attempts shall not be made by UEs without a SIM/USIM inserted. 
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An UE/ME which has not successfully registered shall nevertheless be able to make emergency call attempts on an 
available PLMN(which supports the emergency call teleservice), without the need for the user to select a PLMN. An 
available PLMN is determined by radio characteristics (3GPP TS 23.122 [3]). 

3.2.2.2 At switch-on or recovery from lack of coverage 

At switch on, when in coverage of the last registered PLMN as stored in the SIM/USIM, the UE will attach to that 
network. 

As an option, in automatic selection mode, when no EHPLMN list is present, the UE may select the HPLMN. When the 
EHPLMN list is present, the UE may select the highest priority EHPLMN among the available EHPLMNs. The 
operator shall be able to control the UE behaviour by USIM configuration. 

As an option, if the UE is in manual network selection mode at switch-on 

if the last registered PLMN is unavailable and no equivalent PLMN is available, 

and the UE finds it is in coverage of either the HPLMN or an EHPLMN 

then the UE should register on the corresponding HPLMN or EHPLMN. The UE remains in manual mode. 

If the UE returns to coverage of the PLMN on which it is already registered (as indicated by the registered PLMN 
stored in the SIM/USIM), the UE shall perform a location update to a new location area if necessary. As an alternative 
option to this, if the UE is in automatic network selection mode and it finds coverage of the HPLMN or any EHPLMN, 
the UE may register on the HPLMN (if the EHPLMN list is not present) or the highest priority EHPLMN of the 
available EHPLMNs (if the EHPLMN list is present) and not return to the last registered PLMN. If the EHPLMN list is 
present and not empty, it shall be used. The operator shall be able to control by USIM configuration whether an UE that 
supports this option shall follow this alternative behaviour. 

The default behaviour for a UE is to select the last registered PLMN. 

If there is no registered PLMN stored in the SIM/USIM, or if this PLMN is unavailable and no equivalent PLMN is 
available, or the attempted registration fails, the UE shall follow one of the following procedures for network selection: 

A) Automatic network selection mode 

The UE shall select and attempt registration on other PLMNs, if available and allowable,if the location area is not in the 
list of "forbidden LAs for roaming" and the tracking area is not in the list of "forbidden TAs for roaming" (see 3GPP TS 
23.122 [3]), in the following order: 

i) An EHPLMN if the EHPLMN list is present or the HPLMN (derived from the IMSI) if the EHPLMN list is 
not present for preferred access technologies in the order specified. In the case that there are multiple 
EHPLMNs present then the highest priority EHPLMN shall be selected. It shall be possible to configure a 
voice capable UE so that it shall not attempt registration on a PLMN if all cells identified as belonging to the 
PLMN do not support the corresponding voice service; 

ii) each entry in the "User Controlled PLMN Selector with Access Technology" data field in the SIM/USIM (in 
priority order). It shall be possible to configure a voice capable UE so that it shall not attempt registration on 
a PLMN if all cells identified as belonging to the PLMN do not support the corresponding voice service; 

iii) each entry in the "Operator Controlled PLMN Selector with Access Technology" data field in the SIM/USIM 
(in priority order). It shall be possible to configure a voice capable UE so that it shall not attempt registration 
on a PLMN if all cells identified as belonging to the PLMN do not support the corresponding voice service; 

iv) other PLMN/access technology combinations with sufficient received signal quality (see 3GPP TS 

23.122 [3]) in random order. It shall be possible to configure a voice capable UE so that it shall not attempt 
registration on a PLMN if all cells identified as belonging to the PLMN do not support the corresponding 
voice service; 

v) all other PLMN/access technology combinations in order of decreasing signal quality. It shall be possible to 
configure a voice capable UE so that it shall not attempt registration on a PLMN if all cells identified as 
belonging to the PLMN do not support the corresponding voice service. 

In the case of a UE operating in UE operation mode A or B, an allowable PLMN is one which is not in the "Forbidden 
PLMN" data field in the SIM/USIM . This data field may be extended in the ME memory.(see subclause 3.2.2.4). In 
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the case of a UE operating in UE operation mode C, an allowable PLMN is one which is not in the "Forbidden PLMN" 
data field in the SIM/USIM or in the list of "forbidden PLMNs for GPRS service" in the ME. 

If successful registration is achieved, the UE shall indicate the selected PLMN. 

If registration cannot be achieved on any PLMN, the UE shall indicate "no service" to the user, wait until a new PLMN 
is detected, or new location areas or tracking areas of an allowed PLMN are found which are not in the forbidden LA or 
TA list(s), and then repeat the procedure. When registration cannot be achieved, different (discontinuous) PLMN search 
schemes may be used in order to minimize the access time while maintaining battery life, e.g. by prioritising the search 
in favour of BCCH carriers which have a high probability of belonging to an available and allowable PLMN. 

B) Manual network selection mode 

The UE shall indicate PLMNs, including "Forbidden PLMNs", which are available. If there are none, this shall also be 
indicated. The HPLMN of the user may provide on the USIM additional information about the available PLMNs, if this 
is provided then the UE shall indicate that information to the user. This information, provided as free text may include: 

- Preferred partner, 

roaming agreement status, 

supported services 

Furthermore, the UE may indicate whether the available PLMNs are present on one of the PLMN selector lists (e.g. 
EHPLMN, User Controlled, Operator Controlled or Forbidden) as well as not being present on any of the lists. 

For the purpose of presenting the names of the available PLMNs to the user, the ME shall use the USIM defined names 
if available or other PLMN naming rules in priority order as defined in 3GPP TS 22. 101 [7] (Country/PLMN 
indication). 

Any available PLMNs shall be presented in the following order: 

i) HPLMN (if the EHPLMN list is not present); or if one or more of the EHPLMNs are available then based on 
an optional data field on the USIM either the highest priority available EHPLMN is to be presented to the 
user or all available EHPLMNs are presented to the user in priority order; if the data field is not present, then 
only the highest priority available EHPLMN is presented; 

ii) PLMNs contained in the "User Controlled PLMN Selector" data field in the SIM/USIM (in priority order); 

iii) PLMNs contained in the "Operator Controlled PLMN Selector" data field in the SIM/USIM (in priority 
order); 

iv) other PLMN/access technology combinations with sufficient received signal level (see 3GPP TS 23.122 [3]) 
in random order; 

v) all other PLMN/access technology combinations in order of decreasing signal strength. 

If a PLMN does not support voice services then this shall be indicated to the user. 

The user may select the desired PLMN and the UE shall attempt registration on this PLMN. (This may take place at any 
time during the presentation of PLMNs.) 

If the registration cannot be achieved on the selected PLMN, the UE shall indicate "No Service". The user may then 
select and attempt to register on another or the same PLMN following the above procedure. The UE shall not attempt to 
register on a PLMN which has not been selected by the user. 

Once the UE has registered on a PLMN selected by the user, the UE shall not automatically register on a different 
PLMN unless: 

i) The new PLMN is declared as an equivalent PLMN by the registered PLMN; 

or, 

ii) The user selects automatic mode. 



ETSI 



3GPP TS 22.011 version 8.9.0 Release 8 12 ETSI TS 122 011 V8.9.0 (2009-10) 

If a PLMN is selected but the UE cannot register on it because registration is rejected with the cause "PLMN not 
allowed", the UE shall add the PLMN to the 'Forbidden PLMN' list (subclause 3.2.2.4.1). The UE shall not re-attempt to 
register on that network unless the same PLMN is selected again by the user. 

If a PLMN is selected but the UE cannot register for PS services on it because registration is rejected with the cause 
"GPRS services not allowed in this PLMN", the UE shall not re-attempt to register for E-UTRAN or UTRAN PS or 
GERAN PS on that network. The PLMN is added to the list "Forbidden PLMN's for GPRS services". The UE shall not 
re-attempt to register for E-UTRAN or UTRAN PS or GERAN PS on that network unless the same PLMN is selected 
again by the user. The reception of the cause "GPRS services not allowed in this PLMN", does not affect the CS 
service. 

For requirements to restrict the access of a UE to one or several specific RATs see section 7.1. 

If a PLMN is selected but the UE cannot register on it for other reasons, the UE shall, upon detection of a new LA (not 
in a forbidden LA list) of the selected PLMN, attempt to register on the PLMN. 

If the UE is registered on a PLMN but loses coverage, different (discontinuous) carrier search schemes may be used to 
minimize the time to find a new valid BCCH carrier and maintain battery life, e.g. by prioritizing the search in favour of 
BCCH carriers of the registered PLMN. 

3.2.2.3 User reselection 

At any time, the user may request the UE to initiate reselection and registration onto an alternative available PLMN, 
according to the following procedures, dependent upon the operating mode. 

A) Automatic Network Selection Mode 

The UE shall follow the procedure defined in clause 3. 2. 2.2. A) above. 

B) Manual Network Selection Mode 

The procedure of 3.2.2.2 B) is followed. 

3.2.2.4 Mobile Station reactions to indications of service restriction from the network 

Different types of UE behaviour is required to support, for example, national roaming, regionally provided service and 
temporary international roaming restrictions. The behaviour to be followed by the UE is indicated by the network. 

3.2.2.4.1 "Permanent" PLMN restriction 

When a registration attempt by the UE is rejected by a network with an indication of "permanent" PLMN restriction, the 
PLMN identity shall be written to a list of "Forbidden PLMNs" stored in a data field in the SIM/USIM. 

If a successful registration is achieved on a PLMN in the "Forbidden PLMN" list, the PLMN shall be deleted from the 
list. 

When in automatic mode, the UE may indicate any PLMNs which will not be selected due to their presence in the 
"Forbidden PLMN" list. 

If a UE receives an equivalent PLMN list containing a PLMN which is included in the Forbidden PLMN' list, this 
PLMN shall be removed from the equivalent PLMN list before this is stored by the UE. 

3.2.2.4.2 "Partial" and "temporary" PLMN restrictions 

When a registration attempt by the UE is rejected by a network due to a "partial" or a "temporary" PLMN restriction, 
the UE shall perform one of the following procedures determined by the indication in the location update reject cause 
sent by the network (see 3GPP TS 23.122 [3]): 

i) The UE shall store the tracking area identity or location area identity in the list of "forbidden TAs or LAs for 
regional provision of service" respectively and shall enter the limited service state. The UE shall remain in that 
state until it moves to a cell in a location area where service is allowed. 

ii) The UE shall store the tracking area identity or the location area identity in the list of "forbidden TAs or LAs for 
roaming" respectively and shall use one of the following procedures according to the PLMN selection Mode: 
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A) Automatic network selection mode: 
The procedure of 3.2.2.2. A). 

B) Manual network selection mode: 

The procedure of 3.2.2.2.B). 

iii) The UE shall store the tracking area identity or location area identity in the list of "forbidden TAs or LAs for 
roaming" respectively and shall search for a suitable cell in the same PLMN. 

Note: A suitable cell will belong to a different TA or LA which is not in the 'forbidden TAs or LAs for roaming'). 

3.2.2.4.3 PLMN restrictions for PS services 

When a registration attempt for PS services by the UE is rejected by the network with the cause "GPRS services not 
allowed in this PLMN", the PLMN identity shall be written to a list of "forbidden PLMNs for GPRS service" in the ME. 
This list is deleted when the UE is switched off or when the SIM/USIM is removed; the maximum number of possible 
entries in this list is implementation dependent, but must be at least one entry (see 3GPP TS 23.122 [3]). 

If a successful registration is achieved on a PLMN in the "forbidden PLMNs for GPRS service" list, the PLMN shall be 
deleted from the list. 

3.2.2.5 Periodic network selection attempts 

A UE in Automatic Mode shall make periodic attempts to look for a higher priority PLMN including associated Access 
Technology of the same country as the currently received PLMN including associated Access Technology. For the 
ranking of PLMNs the UE shall use the order used in subclause 3.2.2.2. In the case that there is no associated Access 
Technology identifier the mobile shall assume that all Access Technologies provided by a PLMN are of equal priority. 
Moreover, periodic network selection shall not lead to change of access technology within the registered PLMN. 

In the case that the UE has stored a list of equivalent PLMNs, the UE shall only select a PLMN if it has a higher priority 
than all the PLMNs, in the list of equivalent PLMNs, which are of the same country as the currently registered PLMN. 

NOTE: In the context of this 3GPP TS, the term country is to be interpreted not as a political entity but as a single 
Mobile Country Code (MCC). For instance the USA has multiple MCC. The USA case is in fact treated 
as an exception in the 3GPP specifications. For all other countries, multiple MCCs may be used, however 
the specifications have not taken this into account and there could be adverse effects such as the UE being 
unable to detect that multiple MCCs are within the same country. 

In the case that there are multiple EHPLMNs available, the UE shall not attempt to select a higher priority EHPLMN 
when an EHPLMN has already been selected. The priorities of EHPLMNs are only applicable when the UE is on a 
VPLMN and multiple EHPLMNs are available. 

The UE shall only make reselection attempts while in idle mode for circuit services. In case of GPRS terminals, the UE 
shall only make reselection attempts while in Idle or Stand-by mode. 

The interval between attempts shall be stored in the SIM/USIM. Only the service provider shall be able to select for 
which of the previous situations, periodic network selection shall be attempted and to set the interval, which shall be 
between 6 minutes and 8 hours, with a step size of 6 minutes. One value shall be designated to indicate that no periodic 
attempts shall be made. 

In the absence of a permitted value in the SIM/USIM, or the SIM/USIM is phase 1 and therefore does not contain the 
datafield, then a default value of 60 minutes, shall be used by the UE. 

NOTE: Use of values less than 60 minutes may result in excessive ME battery drain. 

3.2.2.6 Investigation PLMN Scan 

The operator shall be able to control by SIM/USIM configuration whether an UE that is capable shall perform an 
investigation scan. This investigation scan shall be performed after each successful PLMN selection as well as during 
limited service state. The investigation scan shall search for a higher prioritised PLMN that does not offer CS voice 
service. If such a PLMN is available, the user shall be informed. This enables the user to switch to such a PLMN using 
manual selection if the user so prefers. The investigation scan shall not be performed when no SIM/USIM is inserted. 
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3.2.2.7 Void 

3.2.2.8 Steering Of Roaming 

Steering to a specific VPLMN 

It shall be possible for the HPLMN at any time to direct a UE, that is in automatic mode, to search for a specific 
VPLMN and, if it is available, move to that VPLMN as soon as possible. This VPLMN shall then be regarded as the 
highest priority VPLMN as defined by the operator, though any EHPLMN or PLMN on the User Controlled PLMN list 
shall have higher priority. This process shall be done transparently and without inconvenience to the user. 

If the UE is in manual mode, the steering request shall be ignored. 

If the UE is registered on a VPLMN that is present on the User Controlled PLMN List, the steering request shall be 
ignored. PLMNs contained on the User Controlled PLMN List shall have priority over the steered-to-PLMN. 

The UE shall attempt to register on the specified VPLMN even if the specified VPLMN is present on a Forbidden List. 

This mechanism shall be available to the HPLMN even if the VPLMN the UE is registered on is compliant to an earlier 
release of the 3GPP specifications. 

VPLMN Redirection 

It shall be possible for the HPLMN to request a UE, that is in automatic mode, to find and register on a different 
VPLMN from the one it is currently using or trying to register on, if another VPLMN, that is not in a Forbidden List, is 
available. The original VPLMN shall then be treated as the lowest priority VPLMN and would not be selected by the 
UE unless it is the only one available to the UE or has been selected in manual mode. This process shall be done 
transparently and without inconvenience to the user. 

If the UE is in manual mode, the redirection request shall be ignored. 

If the UE is registered on a VPLMN that is present on the User Controlled PLMN List, the redirection request shall be 
ignored. 

This mechanism shall be available to the HPLMN even if the VPLMN the UE is registered on is compliant to an earlier 
release of the 3GPP specifications. 

3.2.3 Network selection for Multi-mode terminals with 3GPP Capability 

Different type"s of Multi-mode terminals combining different technologies and systems in one terminal can be 
produced. It is not possible to foresee all possible configurations and provide a detailed technical specification for 
network and system selection for all possible multi-mode terminal configurations. The following provides the generic 
requirements for network and system selection for Multi-mode terminals with 3GPP Capability. These requirements are 
mandatory for a 3GPP capable multi-mode terminal, unless otherwise is explicitly specified elsewhere in the 3GPP 
Technical Specifications. 

a multi-mode terminal, when in 3GPP mode of operation shall be compliant to the 3GPP specifications, 
including PLMN selection, cell selection and re-selection, paging reception etc., 

As consequence, the multi-mode terminal when entering 3GPP mode of operation shall act as if it were a 
3GPP only UE which had just been switched-on. Similarly, when leaving the 3GPP mode of operation the 
multimode terminal shall act as if it were a 3GPP only UE which had just been switched-off 

When the multimode terminal is in 3GPP mode, the switching between modes in the multi-mode terminal is considered 
an overlay functionality selecting mode of operation. For the design of the overlay functionality the following 
requirements shall be fulfilled: 

The overlay functionality shall include a mechanism to avoid ping-pong between systems, e.g., a timer or 
hysteresis function 

The overlay functionality shall not include network priority mechanisms, which conflict with the network 
priority mechanisms specified in 3GPP specifications, e.g., the Periodic network selection attempts scanning 
within 3GPP based systems for PLMNs of higher priority than the current serving PLMN. 
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Any functionality in the overlay system, such as background scan of other systems, shall not impact the 
fulfilment of 3GPP protocol requirements (in particular in regards to paging, cell selection, cell re-selection and 
PLMN selection) 

As specified in this technical specification, the 3GPP technical specification provides the capability for the user 
to set their own 3GPP PLMN selection preferences; as well as the user can manually select any 3GPP PLMN. 
This has been done to ensure a fair competition environment. These principles shall be maintained in the design 
of the overlay functionality. 



Access control 



4.1 Purpose 



Under certain circumstances, it will be desirable to prevent UE users from making access attempts (including 
emergency call attempts) or responding to pages in specified areas of a PLMN. Such situations may arise during states 
of emergency, or where 1 of 2 or more co-located PLMNs has failed. 

Broadcast messages should be available on a cell by cell basis indicating the class(es) of subscribers barred from 
network access. 

The use of this facility allows the network operator to prevent overload of the access channel under critical conditions. 

It is not intended that access control be used under normal operating conditions. 

It should be possible to differentiate access control between CS and PS domains. Details are specified in TS23.122[3] 
and TS25.304 [10]. Not all RATs need to support this functionality. 

4.2 Allocation 

All UEs are members of one out often randomly allocated mobile populations, defined as Access Classes to 9. The 
population number is stored in the SIM/USIM. In addition, mobiles may be members of one or more out of 5 special 
categories (Access Classes 1 1 to 15), also held in the SIM/USIM. These are allocated to specific high priority users as 
follows. (The enumeration is not meant as a priority sequence): 

Class 15 - PLMN Staff; 

-"- 14 - Emergency Services; 

-"- 13 - Public Utilities (e.g. water/gas suppliers); 

-"- 12 - Security Services; 

-"- 11 - For PLMN Use. 



4.3 Operation 



If the UE is a member of at least one Access Class which corresponds to the permitted classes as signalled over the air 
interface, and the Access Class is applicable in the serving network, access attempts are allowed. Additionally, in the 
case of the access network being UTRAN the serving network can indicate that UEs are allowed to respond to paging 
and perform location registration (see, sec 3.1), even if their access class is not permitted. Otherwise access attempts are 
not allowed. Also, the serving network can indicate that UEs are restricted to perform location registration, although 
common access is permitted. If the UE responded to paging it shall follow the normal defined procedures and react as 
specified to any network command. 

Note: The network operator can take the network load into account when allowing UEs access to the network. 

Access Classes are applicable as follows: 

Classes 0-9 - Home and Visited PLMNs; 
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Classes 1 1 and 15 - Home PLMN only if the EHPLMN list is not present or any EHPLMN; 

Classes 12, 13, 14 - Home PLMN and visited PLMNs of home country only. For this purpose the home country 
is defined as the country of the MCC part of the IMSI. 

Any number of these classes may be barred at any one time. 

The following is the requirements for enhanced Access control on E-UTRAN. 

The serving network shall be able to broadcast mean durations of access control and barring rates (e.g. 
percentage value) that commonly applied to Access Classes 0-9 to the UE. The same principle as in UMTS is 
applied for Access Classes 1 1-15. 

E-UTRAN shall be able to support access control based on the type of access attempt (i.e. mobile originating 
data or mobile originating signalling), in which indications to the UEs are broadcasted to guide the behaviour of 
UE. E-UTRAN shall be able to form combinations of access control based on the type of access attempt e.g. 
mobile originating and mobile terminating, mobile originating, or location registration. The "mean duration of 
access control" and the barring rate are broadcasted for each type of access attempt (i.e. mobile originating data 
or mobile originating signalling). 

The UE determines the barring status with the information provided from the serving network, and perform the 
access attempt accordingly. The UE draws a uniform random number between and 1 when initiating 
connection establishment and compares with the current barring rate to determine whether it is barred or not. 
When the uniform random number is less than the current barring rate and the type of access attempt is indicated 
allowed, then the access attempt is allowed; otherwise, the access attempt is not allowed. If the access attempt is 
not allowed, further access attempts of the same type are then barred for a time period that is calculated based on 
the "mean duration of access control" provided by the network and the random number drawn by the UE. 



4.4 Emergency Calls 



An additional control bit known as "Access Class 10" is also signalled over the air interface to the UE. This indicates 
whether or not network access for Emergency Calls is allowed for UEs with access classes to 9 or without an IMSI. 
For UEs with access classes 1 1 to 15, Emergency Calls are not allowed if both "Access class 10" and the relevant 
Access Class (11 to 15) are barred. Otherwise, Emergency Calls are allowed. 



4.5 Control of UE Capabilities 



To protect the user from the effects of a misbehaving UE (e.g causing additional charges, degraded performance) and to 
protect the network operator's network capacity, including radio resources and network signalling and processing, 
means shall be provided for the HPLMN/EHPLMN and the VPLMN to provide an indication to the UE as to which 
network provided services or functions it is not allowed to use. 

The Selective UE Capabilities list, shall be maintained in the UE and the UE shall not request any services indicated as 
disabled. At registration the HPLMN/EHPLMN or VPLMN may interrogate the status of the list and provide a new list. 

The Selective UE Capabilities list shall not be deleted at switch off and will remain valid until a new list is provided by 
the network. The Selective UE Capabilities list relates to the ME and not to the subscription. 

It should be ensured that UEs are not maliciously disabled, including malicious disabling by a VPLMN, or accidentally 
disabled, or kept disabled, and there shall be a mechanism for restoring disabled UEs in all situations (e.g. in the case 
that the serving network does not support the control of UE Capabilities). 

The UE should use the indications given in the Selective UE Capabilities list to inform the user of the non-availability 
of services or functions. 

There shall be a means for the network to provide an optional customer service number(s) which can be used, by the 
user, to assist in determining the cause of non-availability of specific services. The specifications should also provide 
the capability for the network to include an optional text string that will be displayed by the UE. 

The UE Capabilities list shall take precedence over subscribed services. 

The services to be included in the list are: 
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Call Control functions 

Supplementary Services 

Emergency Calls (including the (U)SIM-less case and subject to regional regulatory requirements, i.e. 
emergency calls shall not be disabled in regions where support of them is required) 

- SMS, via CS and PS 

- LCS, via CS and PS 

- GPRS based services 

- MBMS 

- IMS 

5 Support of Localised Service Area (SoLSA) 

SoLS A consists of a set of service features that give the operator a basis to offer subscribers different services (e.g. 
tariffs or access rights) depending on the location of the subscriber. (3GPP TS 22.043 [5]). The following section is 
only applicable to the support of SoLSA functionality in GERAN. 

5.1 Network selection 

The standard automatic and manual network selection procedures will be used. 

Manual network selection may be required when the PLMN providing the users SoLSA service is not the one on which 
the user is currently registered. 

At manual network selection the UE shall provide the means to present the subscribers LSA(s) for each PLMN 
presented. 

5.2 The Idle-mode operation 

The UE shall always select a valid LSA with the highest priority. 

5.2.1 Subscriber moving from a normal environment to his localised 
service area. 

The UE shall have the ability to prioritise allowed LSA cells in reselection, making it possible to camp on a LSA cell 
earlier (the function shall be network controlled). 

5.2.2 Subscriber moving away from his localised service area to a normal 
environment. 

The UE shall have the ability to prioritise allowed LSA cells in reselection, making it possible to camp on a LSA cell 
longer (the function shall be network controlled). 

5.2.3 Subscriber staying in his localised service area 

The UE shall have the ability to prioritise allowed LSA cells in reselection by being more persistent (the function shall 
be network controlled). 

NOTE: Typically in indoor environments there are occasional reflections and "disturbances" due to macro cells, 
e.g. near the windows. In such a case LSA cells should be favoured even though there is higher field 
strength available from the outdoor cells. 
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5.3 LSA only access 



It shall be possible to allow LSA user to access PLMN only within his LSAs. A LSA user is not allowed to receive 
and/or originate a call outside the allowed LSA area. 

When UE is out of the allowed LSA area it shall be registered in PLMN but indicate subscriber/service specific "out of 
LSA area" notification. It shall be a network controlled function to prevent terminated or/and originated calls. 
Emergency calls are however always allowed. 

5.4 Exclusive access 

Access to exclusive access cells is restricted to defined LSA subscribers. 

Non-LSA subscriber shall consider exclusive access cells as not suitable, only allowing to camp for emergency calls 
(limited service state 3GPP TS 23.122 [3]). 

5.5 Preferential access 

As a network controlled function it shall be possible in LSA to allocate resources at call setup and during the active 
mode to LSA users compared to non-LSA users. 



6 Support of 3GPP - WLAN Interworking 

Support of 3GPP-WLAN interworking and network selection is captured in TS 22.234 [6] 

6.1 Void 

6.2 Void 

6.3 Void 

7 Administrative restriction of subscribers" access 
7.1 Allowed Location and Routing Area identities access 

Means shall be standardised for an administrative restriction of subscribers" access without the need of having explicit 
Tracking/Location/Routing Area identities in the individual subscription profiles. 

To achieve this it shall be possible to indicate per subscriber, in subscription data, allowed categories of Tracking/ 
Location/Routing Areas. It shall be possible to use this subscription information to restrict subscribers" access to 
categories of Tracking/Location/Routing Areas in serving networks accordingly. 

As a minimum, at least one of the following categories shall be available: 

a) GERAN 

b) UTRAN 

c) E-UTRAN 

There might be cases where the visited network has not separated the Location/Routing area categories, in which case 
the administrative restriction of subscribers' access to only GERAN or UTRAN will not be possible. 
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This administrative restriction of subscribers" access shall be an optional feature. 

7.2 Void 

8 Support of Home NodeB and Home E-NodeB 

8.1 General description and requirements 

Access to 3G and evolved 3G (EPS) services may be provided via UTRAN or E-UTRAN cellular base stations 
belonging to e.g. domestic, business, commercial enterprises. This type of access may be provided by the PLMN by 
means of NodeBs referred to as Home Node B (HNB) and Home eNode B (HeNB) respectively. The HNB/HeNB 
provides services to a Closed Subscriber Group (CSG). CSG membership, including temporary membership, is 
managed by both the CSG manager and the network operator. 

8.1 .2 HNB and HeNB Installation, identification and location requirements 

HNB/HeNB shall have a unique equipment identity. 

All the HeNB serving the same CSG share the same identity called CSG Identity. 

It shall be possible to support at least 125 million CSG Identities within a PLMN. 

The radio transmitter of a HNB/HeNB shall not be activated until configured and authorised by the operator. 

- When installing, provisioning, configuring or re-configuring an HNB/HeNB the network operator shall be able 
to: 

verify the node's identity. 

obtain the geographical location as determined by the HNB/HeNB system. 

The network operator shall be able to determine that the HNB/HeNB is installed and operated in accordance with 
all relevant regulatory requirements. 

The network operator shall be able to configure the settings of the HNB/HeNB. In the case where the 
HNB/HeNB has detrimental impact on the network operator's allocated spectrum usage, the HNB/HeNB can be 
set to out-of-service by the network operator. 

Installation and activation of a new HNB/HeNB shall require no reconfiguration of the operator" s network. 

The need for HNB/HeNB -specific equipment in the core network shall be minimised. 

8.2 Mobility Aspects for Home NodeB and Home E-NodeB 

8.2.1 PLMN selection 

The standard automatic and manual network selection procedures will be used to register on a PLMN via a HNB/HeNB. 

8.2.2 Idle-mode operation 
8.2.2.1 UE moving in a CSG cell 

When a UE in idle mode detects the presence of a permissible CSG cell (a CSG cell whose CSG identity is in the 
UE"s white list), the UE shall select the CSG cell. The reselection should balance battery power consumption 
against performance but shall have comparable performance to a cell reselection between two non-CSG cells 
where no neighbour cell information is provided by the network. 
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Note: the reselection procedure may not be assisted by the network. 

Note: it is desirable that the reselection procedure does not result in a perceivable stand by time reduction for 
the user. 

8.2.2.2 UE moving out of a CSG cell 

A UE in idle mode in coverage of the CSG cell shall execute cell reselection process, according to which non- 
CSG cell will be selected when the cell reselection criteria indicates that it should be selected. The reselection 
shall have the same performance as a cell reselection between two non-CSG cells in case network assistance is 
available. In the case where network assistance is not available, the cell reselection performances shall be the 
same as the cell reselection to a CSG cell. 

8.2.3 Connected mode operation- It shall be possible to support service continuity when UE moves from a CSG 
cell to a non-CSG cell. 



8.2.4 Manual CSG Identity selection 



The user shall be able to request the UE to perform a scan for available CSG Identities within the registered PLMN. 
When such request is received the UE shall perform a scan of available CSG cells, their CSG identities and their HNB 
Names. In the UE display, the available CSG identities shall be represented by their associated HNB Names. If the 
HNB Name is not available, the CSG identity shall be displayed instead. An indication shall be given to the user as to 
which of the available CSG identities is contained in the CSG white list. The available CSG identities shall be displayed 
in the following order: 

- The CSG identities that are contained in the white list. 

- Any other CSG identity not included in the CSG white list. 

When the user selects an entry in the list, the UE shall select any of the available CSG cells with the CSG identity 
chosen by the user. 

8.3 Access Control 
8.3.1 General requirements 

The CSG manager shall be able, under the PLMN operator supervision, to add, remove and view the list of CSG 
members. The consent of the invited member or guest shall be obtained before being added to the subscriber 
group. 

CSG members may include subscriber of any PLMN subject to roaming agreement. 

The UE shall maintain a list of allowed CSG identities (white list). It shall be possible to store the list of allowed 
CSG identities in the USIM. When available, the list on the USIM shall take precedence over the list stored in 
the ME non-volatile memory. All CSG cells belonging to a CSG identity not included in the list of allowed CSG 
identities shall be considered not suitable by the UE as specified in TS 25.304 [11] and TS 36.304 [12]. 

Each CSG identity shall be associated to a subscriber group which identifies the subscribers allowed to access 
the CSG. When the subscriber group is updated, this information shall be transferred by the network and to the 
affected UEs belonging to the subscriber group. 

It shall be possible to limit the period of time during which the UE is a member of the CSG. It shall be possible 
to configure a time period for each temporary member. 

The time period shall be configurable by the CSG manager and/or the network operator operating the CSG cell 
and shall span from 1 decihour to several days. If no value is given unlimited access to the CSG cell is allowed. 

When the time period expires 

The CSG shall no longer be considered to be available to provide services, except for emergency calls. 

All affected UEs in connected mode are released. 
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When the subscriber group is updated, the affected UE shall be informed accordingly. 

8.3.2 <Void> 

8.3.3 Home NodeB requirements 

- Mechanisms shall be specified for a HNB to control access (i.e. accept and reject connection requests) of pre- 
Release 8 UEs. 

Note: Such mechanisms may be different for those used to access control a Release 8 UE. 

The operation of a HNB shall not adversely impact the performances of a pre-Release 8 UEs operating in the 
area where the HNB is active and vice versa. 

The total bandwidth from the HNB towards the network for 4 simultaneous TS1 1 or TS12, including signalling 
and overhead, shall not exceed 200 kbps. 

8.4 Display requirements 

8.4.1 CSG Type 

The CSG Type is necessary so that the user knows for example when he is in "Home" or in "Campus" coverage. This 
would provide the user with a reliable indication on the billing mode (e.g. "Home" or "Campus"). The HNB Name 
cannot be used for this purpose as the operator is not supposed to ensure its uniqueness or a consistent naming scheme. 

It shall be possible to provide the CSG Type when the UE is camping on a cell that provides a CSG identity that is part 
of the UE whitelist. 

The UE shall display the CSG Type when available. 

It shall be possible for the Operator to configure the CSG Type provided to the user. 

The CSG Type shall be in a human readable form. It shall be possible to store the CSG Type in the USIM in text and/or 
graphic format. When the CSG Type has a text component, the CSG Type text length shall not exceed 12 characters in 
any language. 

The CSG Type may be stored optionally in the ME. If the CSG Type is present in the USIM, the CSG Type in the ME 
shall be ignored. 

It shall be possible to associate each CSG Type to each of the CSG identities contained in the CSG white list. 

8.4.2 HNB Name 

It shall be possible for the a CSG cell to broadcast a HNB Name in free text format. The UE may display the HNB 
Name when camping on the cell where it is broadcast. The HNB Name shall be configurable by the operator or the 
H(e)NB owner at the discretion of the operator. 

The HNB Name length shall not exceed 48x8 bits. 

NOTE: In order to allow the maximum flexibility in the way the HNB Name is configured in any language, UTF- 
8 coding should be used; this allow a maximum length of 48 characters coded on one byte, 24 characters 
on two bytes, 16 characters on 3 bytes down to a minimum of 12 characters if all characters are encoded 
on 4 bytes. 

The HNB Name may be stored in the USIM. If the HNB Name stored on the USIM is available, it shall take precedence 
over the broadcasted HNB Name. 

The HNB Name may be stored optionally in the ME. If the HNB Name is present in the USIM, the HNB Name in the 
ME shall be ignored. 

NOTE: The HNB Name is necessary in order to aid the user in choosing the correct CSG identity when 
performing a manual CSG identity selection. 
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8.5 Services support 

8.5.0 General 

There shall be no difference in the user experience when using the PLMN provided services via HNB/HeNB or via 
NB/eNB. 

NOTE: This is subject to resources available between the HNB/HeNB and the operator's network. 

8.5.1 Emergency services 

HNB/HeNB shall support emergency calls for both CSG and non CSG members. 

It shall be possible for the network operator to provide location information of the UE attempting an emergency call 
over a HNB/HeNB. The location information shall be sufficiently accurate to comply with the regulatory requirements 
that apply to the area where the HNB/HeNB is deployed. 
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